OpenEvidence Inc. Acceptable Use Policy
Last Updated: September 17, 2026
Our Acceptable Use Policy (also referred to as our “AUP”) applies to anyone who can submit inputs to OpenEvidence’s products or services (or both) (collectively, the “Services”), all of whom we refer to as “users.” The AUP is intended to help our users stay safe and promote the responsible use of our Services.
This AUP is incorporated into and forms part of the OpenEvidence Network Terms of Use (the “Terms”). Your use of the Services is subject to both this AUP and the Terms. Capitalized terms used but not defined in this AUP shall have the meanings given to them in the Terms.
We will update the AUP over time as our technology evolves.
Please review the AUP carefully before using our Services. OpenEvidence has implemented detection and monitoring tools to enforce the AUP. If we learn that you have violated the AUP, we may throttle, suspend, or terminate your access to our Services.
If you believe that our model outputs are potentially inaccurate, biased, or harmful, please report it directly in our product through the “report issues” thumbs down button or similar feedback features (where available).
1. Use our Services as a tool to assist your professional judgment
When using our Services to provide advice, or recommendations directly affecting individuals, a qualified medical professional must review all content before dissemination or finalization. You and your organization remain responsible for the accuracy and appropriateness of any information provided.
You may not use the Services with the intention of creating any kind of physician/patient relationship. You are solely responsible for evaluating the information obtained from the Services and for your use or misuse of such information in connection with your treatment decisions or otherwise.
2. Do not input prohibited or unauthorized information
This includes using our Services to input, upload, import, or submit:
- Information to which disclosure or access is prohibited under applicable laws, rules, regulations, or contractual obligations
- Information that infringes any third-party rights, violates any contractual obligation owed to a third party, or is otherwise unauthorized
- Information that is unlawful, harmful, obscene, defamatory, threatening, harassing, abusive, slanderous, offensive, or embarrassing to any other person or entity
- Information that promotes discrimination, bigotry, racism, hatred, harassment, or harm against any individual or group
- Information that promotes illegal activity
- Information that is fraudulent, false, misleading, or deceptive
- Information that constitutes an advertisement or solicitation of business
- Information that originates from, relates to, or identifies (directly or indirectly) any individuals resident in the European Union (EU), European Economic Area (EEA), the United Kingdom (UK), or any U.S. embargoed countries
- Information for which you have not obtained all necessary consents, authorizations, or rights required for its submission, use, or disclosure through the Services
- Information or materials the submission of which would breach your employment agreement, institutional policies, or any other obligations owed to a health system, hospital organization, or other entity with which you are affiliated
- Information or prompts intended to exfiltrate confidential OpenEvidence information, data, or intellectual property
3. Do not violate applicable laws or engage in illegal activity
This includes using our Services to:
- Acquire or exchange illegal or controlled substances
- Engage in or facilitate human trafficking or prostitution
- Infringe, misappropriate, or violate the intellectual property rights of a third party
- Violate any other applicable laws or regulations in your jurisdiction
- Impersonate any person or entity, or misrepresent your affiliation with any person or entity
- Submit, process, or disseminate material non-public information in violation of applicable securities laws
4. Do not engage in fraudulent, abusive, or predatory practices
This includes using our Services to:
- Generate or distribute spam
- Generate content for fraud, scams, phishing, or malware that may cause financial or psychological harm
- Facilitate the sale or distribution of fraudulent or deceptive products
- Engage in deceptive or abusive practices exploiting individuals based on, without limitation, age, disability, or socioeconomic circumstances
5. Identify the source of output to individuals
If model outputs are presented directly to individuals who are not users, you must disclose your use of AI to produce advice, decisions, or recommendations. At a minimum, this disclosure must be provided at the beginning of each session.
6. Comply with patient communication requirements when using the Services to contact patients
If you or your organization use the Services to communicate with patients by telephone, text, or fax, you represent that:
- The patient provided their phone number directly to you or your organization for purposes of receiving informational messages
- Any communications are informational in nature only and do not contain telemarketing or advertising content
- Communications that include billing, insurance, or related information contain only the minimum information reasonably necessary to prompt the patient to take action (for example, directing the patient to a secure patient portal or a callback number instead of including itemized charges, diagnosis or procedure codes, account numbers, or other detailed protected health information in the body of the message), and are transmitted only through a channel and process reasonably designed to (1) safeguard the confidentiality of the information and (2) to confirm that the communication reaches the intended patient
- Communications are related to the purpose for which the patient provided the phone number in the first instance
- The number contacted is still in use by the patient
- The patient has not directed you or your organization not to use the provided phone number to contact them, or otherwise limited how you may use the patient’s number to contact them
7. Do not misuse or publicly redistribute content provided through our Services
No part of the content or materials provided through our Services may be copied for resale or other commercial use, or posted on websites or internet domains. You must use commercially reasonable efforts to prevent unauthorized access to or use of the Services and content provided through the Services and notify us promptly of any such unauthorized access or use.
You shall not aggregate, share, disclose, distribute, or create derivative works of any third-party content made available through the Services, including medical journal articles, reference content, clinical tools, and other materials provided by third parties, for any commercial purpose, including for AI training, machine learning, or content generation purposes. You may use such third-party content purely for clinical care or internal research or education purposes. Third-party content providers may enforce their rights directly against you for any violation of this restriction.
8. Do not compromise privacy or identity rights
This includes using our Services to:
- Violate applicable privacy laws, including by sharing personal or protected health information without consent or accessing private data unlawfully
- Collect, solicit, or access without authorization private information such as non-public contact details, health data, biometric or neural data (including facial recognition), or confidential data
- Attempt to identify or re-identify any individual using the Services
- Attempt to identify any individual using any Third-Party Services or Third-Party Content made available through the Services
9. Do not compromise computer or network systems
This includes using our Services to:
- Discover or exploit system, network, or application vulnerabilities without the system owner’s authorization
- Gain unauthorized access to systems, networks, or devices through technical attacks or social engineering
- Create or distribute malware, ransomware, or other malicious code
- Develop tools for denial-of-service attacks or managing botnets
- Create tools to intercept communications or monitor devices without the system owner’s authorization
- Develop persistent access tools that operate below normal security levels, including firmware modifications or hardware implants
- Create automated tools to compromise multiple systems at scale
- Bypass security controls, including authentication systems, endpoint protection, or monitoring tools
- Interfere with or disrupt the proper functioning of the Services, including by sending viruses, overloading, flooding, or crashing the Services
10. Do not compromise children’s safety
This includes using our Services to:
- Create, distribute, or promote child sexual abuse material (“CSAM”), including AI-generated CSAM
- Facilitate child abuse of any form, including instructions for how to conceal abuse
Note: We define a minor or child to be any individual under the age of 18, regardless of jurisdiction. When we detect CSAM (including AI-generated CSAM), we will report to the relevant authorities.
11. Do not create or spread misinformation
This includes using our Services to:
- Provide false or misleading information related to medical, health, or science issues
- Create or disseminate misleading information about laws, regulations, procedures, or standards established by any institution or governing body
- Create or disseminate misleading information targeting, or about, any group, entity, or person
- Create or disseminate conspiratorial narratives targeting any group, individual, or entity
12. Do not abuse our platform
This includes using our Services to:
- Coordinate malicious activity across multiple accounts to evade detection or circumvent product guardrails, or generate inputs that otherwise violate this AUP
- Use automation to create accounts or engage in spammy behavior
- Circumvent a ban by creating a new account, using an existing account, or providing access to a previously banned person or entity
- Intentionally bypass restrictions or guardrails to cause the model to produce harmful outputs (e.g., jailbreaking or prompt injection) without prior OpenEvidence authorization
- Use any automated software, devices, or processes (including AI assistants, spiders, robots, scrapers, crawlers, or data mining tools) to scrape, extract, or aggregate content from the Services without prior OpenEvidence authorization
- Reverse engineer, decompile, disassemble, or otherwise attempt to discover the source code, algorithms, or underlying structure of the Services
- Use the Services, or any content or data obtained through the Services, to develop, improve, or train any product or service that competes with the Services
- Generate synthetic data through the systematic submission of queries or prompts for the purpose of training, validating, or benchmarking any AI or machine learning model without prior OpenEvidence authorization
- Circumvent any protective technological measure associated with the Services
- Modify, adapt, translate, or create derivative works based on any content, materials, or documentation provided through the Services, except to the extent necessary to facilitate or improve clinical care or for internal research or education purposes
- Copy, reproduce, rent, lease, distribute, pledge, assign, or otherwise transfer any content, materials, or documentation provided through the Services
- Use the Services for timesharing or service bureau purposes or otherwise for the benefit of a third party not authorized to access the Services
- Share your authentication credentials with a third party to give them access to the Services
- Remove, alter, or obscure any proprietary notices, legends, symbols, or labels on the Services or any content or materials provided through the Services
- Forge headers or otherwise manipulate identifiers in order to disguise the origin of any content transmitted through the Services
- Use any of OpenEvidence’s brands, logos, trademarks, or other proprietary marks in any business name, email, URL, or other context unless expressly approved in writing by OpenEvidence
- Attempt to access or search the Services through the use of any engine, software, tool, agent, device, or mechanism (including scripts, bots, spiders, or crawlers) other than through software generally available through web browsers